i used a friends emailadres and confirmed it by the insecure password reset function which states if the account exists or not. This is also a security no no as anyone can check if their 'friend' is registered.
this is not something i want cause i like my users to have their privacy
anyone has an idea how to fix this issue ?
Team>>confirmed it by the insecure password reset function which states if the account exists or not.
Currently the text of the notice is " There is no user with this email address".
You can change it to something else in admin panel>>languages
{text key='base+forgot_password_no_user_error_message'}
For example to: "Entered email is incorrect".
Thanks for this suggestion, it makes it little bit better....but still when a the email is right it will tell that it send resetcode so they still know if that email has an account or not...
